The Ministry of Commerce has warned businesses in the Kingdom against sharing commercial, personal or financial information, or uploading official documents, through untrusted websites and online platforms.
The ministry urged businesses to verify the identity of any entity requesting information and understand the purpose and legal basis for collecting and processing the data before providing it.
The warning comes amid reports of platforms claiming to offer digital identity-related services for businesses and other similar services without a clear legal status that would allow users to verify how their information is collected, used, stored and protected.
Sensitive Business Data at Risk
The ministry advised businesses not to share sensitive information with untrusted entities, including:
- Commercial registration records.
- Tax identification numbers.
- National addresses.
- Contact details.
- Bank account and IBAN information.
- Official documents and attachments.
- Any information that could identify a business or its owner.
Businesses are encouraged to establish the identity of the requesting entity, the purpose of data collection and the legal basis for processing the information before providing commercial, personal or financial data.
Government Logos Do Not Guarantee Legitimacy
The ministry noted that some platforms may use names, descriptions or services designed to create an impression of legitimacy while requesting large amounts of business information and documents.
It also warned that displaying government logos or names does not necessarily mean that a platform is officially affiliated with or approved by a government entity.
Businesses should verify the platform operator, review its privacy policy and understand how the information will be used rather than relying on a website’s appearance or branding as proof of legitimacy.
Never Share Passwords or Verification Codes
The Ministry of Commerce also warned businesses against sharing passwords, verification codes or login credentials for government and banking accounts with any third party.
It urged users to avoid links and services requesting information beyond what is necessary to complete a specific transaction.
Government services should be completed through official platforms and channels, with businesses verifying the service provider before entering information or uploading documents.
Reporting Suspicious Practices
The ministry encouraged businesses and individuals to report suspected violations involving commercial or electronic practices through its official channels, including the unified 1900 number.
The warning highlights the importance of protecting business data and increasing awareness of digital fraud risks as more commercial and government services move online.
